The Synnovis cyber-attack: A critical warning for healthcare providers over patient safety

On 3 June 2024, Synnovis, a pathology provider serving several NHS trusts in south-east London, suffered a ransomware attack which led to widespread disruption in NHS services and significant patient harm[1]. A year later, the full extent of the impact on patients is becoming clear.

In this article we will talk about why healthcare providers need to be aware of the additional risks to patient safety a cyber-attack can bring, how cyber threats expose critical insurance gaps and what steps you can take to protect your patients, operations, and reputation.

What do we know about the attack?

This ransomware attack crippled the Synnovis IT systems and caused widespread disruption across several NHS trusts in south-east London. The breach, reportedly enabled by the absence of two-factor authentication, resulted in nearly 600 incidents, 170 of which directly affected patient care. By January 2025, the financial impact was estimated at £37.7 million[2].

The consequences included:

 This incident serves as a powerful reminder that cybersecurity in healthcare is not just an IT issue, but a critical component of patient safety and operational resilience.

The Healthcare sector – a major target

The healthcare sector is one of the most frequently targeted industries for cyber-attacks. This is due to two key factors: the high value of sensitive medical records on the dark web, and the essential, time-critical nature of healthcare services. Any disruption can directly impact patient safety and care delivery.

Cybersecurity is no longer just an IT concern—it's a frontline issue in patient safety and operational continuity. To safeguard against these threats, healthcare providers must implement robust security measures and invest to keep their software and technology up to date.

Proactive investment in cybersecurity is not optional; it’s essential.

Will your insurance cover respond?

The Synnovis attack revealed a critical blind spot for many healthcare providers: even with both medical malpractice and cyber insurance in place, you may still be exposed to significant financial and legal risk. Why? Because these policies often operate in silos—and the gaps between them can leave you vulnerable when patient harm results from a cyber event.

Understanding the coverage divide:

• Medical Malpractice insurance – typically cover bodily injury claims, including medical errors and negligence, however, often exclude cyber incidents
• Cyber insurance – typically cover cyber-related incidents such as data breaches and ransomware attacks, but often exclude bodily injury claims.

This divide can create a dangerous grey area. For example, if a ransomware attack delays a critical diagnosis and the patient suffers harm, your cyber policy might cover the breach—but not the injury. Meanwhile, your malpractice policy might exclude the incident because it originated from a cyber event.

Understanding how your insurance policies interact and where they fall short is essential. Without a coordinated approach, you may find yourself unprotected when it matters most.

Take action to help protect your patients and your practice

The Synnovis ransomware attack is a powerful reminder that cyber incidents don’t just disrupt operations—they can directly endanger patient lives and expose healthcare providers to serious legal and financial consequences.

Now is the time to act. Work with a specialist insurance broker who understands the unique risks facing healthcare providers. A tailored review of your medical malpractice and cyber policies can help you identify hidden gaps, eliminate grey areas, and ensure you’re fully protected when it matters most.

Don’t wait for a crisis to reveal the cracks in your coverage. Speak to Howden’s specialist Healthcare team today.